Hello again Bernhard,
Thank you for providing this software and your support.
There are some CVE with score CRITICAL or HIGH in smtprelay and I would be very pleased if you could provide new release with a new version of stdlib.
trivy image --scanners vuln --ignore-unfixed --severity HIGH,CRITICAL --table-mode detailed --quiet --exit-code 2 [repo/image:tag]
usr/local/bin/smtprelay (gobinary)
==================================
Total: 4 (HIGH: 3, CRITICAL: 1)
┌─────────┬────────────────┬──────────┬────────┬───────────────────┬──────────────────────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼──────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ stdlib │ CVE-2025-68121 │ CRITICAL │ fixed │ v1.25.5 │ 1.24.13, 1.25.7, 1.26.0-rc.3 │ crypto/tls: Unexpected session resumption in crypto/tls │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-68121 │
│ ├────────────────┼──────────┤ │ ├──────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ │ CVE-2025-61726 │ HIGH │ │ │ 1.24.12, 1.25.6 │ golang: net/url: Memory exhaustion in query parameter │
│ │ │ │ │ │ │ parsing in net/url │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-61726 │
│ ├────────────────┤ │ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ CVE-2025-61728 │ │ │ │ │ golang: archive/zip: Excessive CPU consumption when building │
│ │ │ │ │ │ │ archive index in archive/zip │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2025-61728 │
│ ├────────────────┤ │ │ ├──────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ │ CVE-2026-25679 │ │ │ │ 1.25.8, 1.26.1 │ net/url: Incorrect parsing of IPv6 host literals in net/url │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2026-25679 │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴──────────────────────────────┴──────────────────────────────────────────────────────────────┘
Thanks a lot.
Hello again Bernhard,
Thank you for providing this software and your support.
There are some CVE with score CRITICAL or HIGH in smtprelay and I would be very pleased if you could provide new release with a new version of
stdlib.Thanks a lot.